794 matches found
Huawei EulerOS: Security Advisory for libwmf (EulerOS-SA-2019-2623)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS 2.0 SP3 : openslp (EulerOS-SA-2019-2641)
According to the versions of the openslp packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Buffer overflow in the SLPFoldWhiteSpace function in common/slpcompare.c in OpenSLP 2.0 allows remote attackers to have unspecified impact via ...
EulerOS 2.0 SP5 : libwmf (EulerOS-SA-2019-2537)
According to the version of the libwmf packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The wmfmalloc function in api.c in libwmf 0.2.8.4 allows remote attackers to cause a denial of service application crash via a crafted wmf file,...
EulerOS 2.0 SP2 : libwmf (EulerOS-SA-2019-2492)
According to the version of the libwmf packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The wmfmalloc function in api.c in libwmf 0.2.8.4 allows remote attackers to cause a denial of service application crash via a crafted wmf file,...
Important: Red Hat Security Advisory: kernel security and bug fix update
An update for kernel is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...
Scientific Linux Security Update : libtiff on SL7.x x86_64 (20190806)
Security Fixes : - libtiff: buffer overflow in gif2tiff CVE-2016-3186 - libtiff: Heap-based buffer overflow in the cpSeparateBufToContigBuf function resulting in a denial of service or possibly code execution CVE-2018-12900 - libtiff: Out-of-bounds write in tifjbig.c CVE-2018-18557 - libtiff: NUL...
libtiff: tiff2bw tool failed memory allocation leads to crash
An issue was discovered in LibTIFF 4.0.9. There is a NULL pointer dereference in the function LZWDecode in the file tiflzw.c...
The vulnerability of the pdpl_get_raw handler implementation in the Linux operating system allows a hacker to trigger a service failure.
The vulnerability in the implementation of the pdplgetraw function parsec/parsec.ko in the Linux kernel relates to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a system failure when there is a memory shortage in the system. This is because the...
Bento4 Denial of Service Vulnerability (CNVD-2019-21439)
Bento4 is an open source C++ library for reading and writing MP4 files. A security vulnerability exists in Bento4 version 1.5.1.0, which stems from the program failing to properly handle memory allocation failures. An attacker can exploit this vulnerability to cause a denial of service crash...
UBUNTU-CVE-2019-13238
An issue was discovered in Bento4 1.5.1.0. A memory allocation failure is unhandled in Core/Ap4SdpAtom.cpp and leads to crashes. When parsing input video, the program allocates a new buffer to parse an atom in the stream. The unhandled memory allocation failure causes a direct copy to a NULL...
Null pointer dereference
An issue was discovered in Bento4 1.5.1.0. A memory allocation failure is unhandled in Core/Ap4SdpAtom.cpp and leads to crashes. When parsing input video, the program allocates a new buffer to parse an atom in the stream. The unhandled memory allocation failure causes a direct copy to a NULL...
CVE-2019-13238
CVE-2019-13238 affects Bento4 1.5.1.0. The issue is an unhandled memory allocation failure in Core/Ap4SdpAtom.cpp that causes a direct copy to a NULL pointer while parsing an atom in the stream, leading to crashes. Related entries describe the vulnerability as an incomplete fix (Incomplete Fix CV...
SUSE-SU-2019:1733-1 Security update for elfutils
This update for elfutils fixes the following issues: Security issues fixed: - CVE-2018-16403: Fixed a heap-based buffer over-read that could have led to Denial of Service bsc1107067. - CVE-2016-10254: Fixed a memory allocation failure in alloxateelf bsc1030472. - CVE-2019-7665: NTPLATFORM core fi...
openSUSE Security Update : elfutils (openSUSE-2019-1590)
This update for elfutils fixes the following issues : Security issues fixed : - CVE-2017-7607: Fixed a heap-based buffer overflow in handlegnuhash bsc1033084 - CVE-2017-7608: Fixed a heap-based buffer overflow in eblobjectnotetypename bsc1033085 - CVE-2017-7609: Fixed a memory allocation failure ...
OPENSUSE-SU-2019:1590-1 Security update for elfutils
This update for elfutils fixes the following issues: Security issues fixed: - CVE-2017-7607: Fixed a heap-based buffer overflow in handlegnuhash bsc1033084 - CVE-2017-7608: Fixed a heap-based buffer overflow in eblobjectnotetypename bsc1033085 - CVE-2017-7609: Fixed a memory allocation failure in...
SUSE SLED15 / SLES15 Security Update : elfutils (SUSE-SU-2019:1486-1)
This update for elfutils fixes the following issues : Security issues fixed : CVE-2017-7607: Fixed a heap-based buffer overflow in handlegnuhash bsc1033084 CVE-2017-7608: Fixed a heap-based buffer overflow in eblobjectnotetypename bsc1033085 CVE-2017-7609: Fixed a memory allocation failure in...
Linux kernel memory leak vulnerability
The Linux kernel is a computer operating system kernel written in C and assembly language, compliant with the POSIX standard, and distributed under the GNU General Public License. A memory disclosure vulnerability exists in coninsertunipair in drivers/tty/vt/consolemap.c in Linux kernel 5.1.5 and...
EulerOS Virtualization 3.0.1.0 : libpng (EulerOS-SA-2019-1421)
According to the versions of the libpng package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - The pngsettext2 function in pngset.c in libpng 1.0.x before 1.0.59, 1.2.x before 1.2.49, 1.4.x before 1.4.11, and 1.5.x before...
